Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/40452641-7ffb-33fc-9039-cf8af04c5a33.roa
File:                     40452641-7ffb-33fc-9039-cf8af04c5a33.roa (raw, json)
Hash identifier:          8mmY2c2gE92EiumjBdnp7H1YdWArmESYq+9OO3UNQTk=
Subject key identifier:   B5:F5:49:03:10:F8:9B:DE:4E:AF:66:EA:BD:E0:A6:A8:23:7A:38:0F
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584CB121CC912A46FD5778AC1F80
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/40452641-7ffb-33fc-9039-cf8af04c5a33.roa
Signing time:             Fri 30 Jan 2026 02:00:31 +0000
ROA not before:           Fri 30 Jan 2026 02:00:31 +0000
ROA not after:            Thu 30 Apr 2026 01:00:31 +0000
asID:                     206216
IP address blocks:        170.205.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b1:21:cc:91:2a:46:fd:57:78:ac:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Jan 30 02:00:31 2026 GMT
            Not After : Apr 30 01:00:31 2026 GMT
        Subject: CN=aa5768ef-1ef9-410a-bdec-cc94176ff7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:fa:d3:ca:c5:a1:c4:79:1a:b8:b6:f2:d4:
                    48:2a:57:94:20:17:b1:31:d6:1c:c0:25:06:44:72:
                    bb:74:79:0b:cc:7c:10:26:01:fb:ee:80:82:f6:d5:
                    e1:a8:45:57:da:58:bd:98:aa:7d:2f:47:0c:82:bb:
                    f6:a2:1e:a5:aa:63:b1:c3:5a:cc:70:8b:b0:59:0c:
                    9a:b8:56:3a:8e:45:77:86:2e:ea:7f:32:b8:2d:e7:
                    45:db:88:ff:a4:72:d8:20:a5:b2:09:c7:25:3b:64:
                    a4:0b:d8:8a:48:84:f5:ef:04:a7:47:a3:2b:18:c0:
                    91:d5:9d:6f:b9:d3:a4:01:33:e2:9d:c7:18:2f:d1:
                    06:31:4b:c9:8f:bf:d3:e1:94:99:96:4c:ed:96:88:
                    03:d7:0c:65:d5:4f:0f:5b:db:ed:ef:80:41:cc:db:
                    1e:0f:34:ef:c3:b8:d9:90:a6:32:8a:69:5c:fb:9a:
                    7a:f5:02:5e:30:f8:5f:f9:b2:eb:02:5a:d6:0b:e6:
                    d6:0a:a0:71:d5:56:90:84:62:15:46:3c:bd:f4:57:
                    64:3b:f9:02:df:d9:01:a7:c1:fc:a9:83:d6:7e:e1:
                    52:c2:e3:11:52:d9:8a:a1:73:fc:40:fe:91:ab:7a:
                    c9:1c:e2:6f:c5:75:c3:e5:de:19:07:5b:73:0d:b3:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F5:49:03:10:F8:9B:DE:4E:AF:66:EA:BD:E0:A6:A8:23:7A:38:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/40452641-7ffb-33fc-9039-cf8af04c5a33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:11:e9:b4:cd:c1:71:74:e1:a8:47:89:23:ff:bd:3f:d6:5f:
         92:13:59:fc:d1:6f:25:87:ef:74:b6:84:02:3f:30:b4:a3:24:
         95:ab:56:7a:24:b7:a2:5a:0c:d9:4d:a4:4b:ad:db:4b:43:ef:
         39:13:73:88:d5:ac:65:c0:d2:16:33:1f:58:82:3f:1f:f5:dc:
         98:9c:a8:2a:3f:6d:a9:0f:28:26:60:4e:56:29:03:32:02:26:
         cb:1e:60:6a:a4:9b:23:63:4b:61:80:89:9f:88:90:71:e2:20:
         e1:e9:83:64:88:ef:76:67:ac:6f:12:7c:0a:68:86:07:af:25:
         03:c1:99:ee:48:a3:e3:41:e1:fa:e9:96:4d:26:c3:be:1c:9f:
         96:23:87:7b:e8:3d:b2:de:7f:e8:b6:9d:a4:b2:fc:c6:6c:46:
         1e:cb:14:5b:83:1a:6b:bd:ae:8b:2e:29:ab:8e:27:5e:92:2f:
         ae:a3:3e:07:59:40:3a:94:08:a0:73:05:37:d3:3f:50:98:50:
         a1:cd:2a:34:77:cd:30:d3:90:0e:c7:f1:5f:e4:2c:b9:bc:97:
         1b:f9:cb:82:4c:67:59:62:7d:ec:54:50:10:44:34:c9:31:81:
         e1:26:37:08:b1:11:5e:b4:65:32:0c:d8:77:c8:31:6c:5d:a5:
         0d:89:67:57
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIcyRKkb9V3isH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjc3OThhYmItNzExZC00ZjEwLWJjNDYtYmNlZWQwNTVl
MWZhMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk
YWE1NzY4ZWYtMWVmOS00MTBhLWJkZWMtY2M5NDE3NmZmN2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7j608rFocR5Gri28tRIKleUIBexMdYcwCUG
RHK7dHkLzHwQJgH77oCC9tXhqEVX2li9mKp9L0cMgrv2oh6lqmOxw1rMcIuwWQya
uFY6jkV3hi7qfzK4LedF24j/pHLYIKWyCcclO2SkC9iKSIT17wSnR6MrGMCR1Z1v
udOkATPinccYL9EGMUvJj7/T4ZSZlkztlogD1wxl1U8PW9vt74BBzNseDzTvw7jZ
kKYyimlc+5p69QJeMPhf+bLrAlrWC+bWCqBx1VaQhGIVRjy99FdkO/kC39kBp8H8
qYPWfuFSwuMRUtmKoXP8QP6Rq3rJHOJvxXXD5d4ZB1tzDbOmXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLX1SQMQ+JveTq9m6r3gpqgjejgPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5
OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2VlZDA1NWUxZmEvNDA0NTI2NDEtN2ZmYi0z
M2ZjLTkwMzktY2Y4YWYwNGM1YTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZjc3OThhYmItNzExZC00ZjEwLWJj
NDYtYmNlZWQwNTVlMWZhL2Y3Nzk4YWJiLTcxMWQtNGYxMC1iYzQ2LWJjZWVkMDU1
ZTFmYS5jcmwwHwYDVR0jBBgwFoAUzJA916o5BeznNQisy0X0bmW8HeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mNzc5OGFiYi03MTFkLTRmMTAtYmM0Ni1iY2Vl
ZDA1NWUxZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs0dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMYR6bTNwXF04ahHiSP/vT/WX5ITWfzRbyWH73S2hAI/MLSjJJWrVnok
t6JaDNlNpEut20tD7zkTc4jVrGXA0hYzH1iCPx/13JicqCo/bakPKCZgTlYpAzIC
JsseYGqkmyNjS2GAiZ+IkHHiIOHpg2SI73ZnrG8SfApohgevJQPBme5Io+NB4frp
lk0mw74cn5Yjh3voPbLef+i2naSy/MZsRh7LFFuDGmu9rosuKauOJ16SL66jPgdZ
QDqUCKBzBTfTP1CYUKHNKjR3zTDTkA7H8V/kLLm8lxv5y4JMZ1lifexUUBBENMkx
geEmNwixEV60ZTIM2HfIMWxdpQ2JZ1c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:09 2026 by rpki-client